
Director, Ops Blockmetrix. #Bitcoin. Never Stop Digging! Former @FoundryServices & @Compass_Mining. Geaux Tigers!
Colorado, USA
Joined November 2012
- Tweets2.3K
- Following2.8K
- Followers3.9K
- Likes6.7K
Pinned Tweet
Neil's 10 Rules for Bitcoin Miners
1. Always be able to pay your OpEx without cashing in your #Bitcoin💱
2. Bitcoin mining is not for everyone.💎👐
3. Everyone is a noob unless they prove otherwise🤓
4. Never listen to people who make unprompted price predictions📉
We're all just trying to pick up pennies in front of steamrollers here. It doesnt matter how many people are in the way, the steamroller still wins.
Neil Galloway ⛏️ retweeted
𝗕𝗶𝘁𝗰𝗼𝗶𝗻 𝗦𝗲𝗶𝗻𝗳𝗲𝗹𝗱: 𝗧𝗵𝗲 𝗗𝗼𝘂𝗯𝗹𝗲 𝗦𝗽𝗲𝗻𝗱
George likes his Bitcoin friends but he also likes his non bitcoiner friends, can he manage them both?
Neil Galloway ⛏️ retweeted
🚨 PSA ⚠️
Bad Actors in, or formally in, the Bitcoin space that are actively trying to affinity scam you:
Luke Dash Jr. @LukeDashjr
Mechanic @GrassFedBitcoin
C Guida @cguida6
Matt Kratter @mattkratter
Justin Bechler @1914ad
Neil Galloway ⛏️ retweeted
The discussion between @Blockstream and the white-hat hacker (WHH) regarding the ~4000 BTC from @Liquid_BTC is happening in public. It seems to be their preference over email. As it's hard to follow the chain of messages in OP_RETURN, here's a summary with links.
11:30 AM PDT - WHH: "we are whitehats. contact us on chain"
mempool.space/tx/c103de95817…
12:31 PM PDT - Blockstream: "Please contact security@blockstream.com"
mempool.space/tx/91271efcbb5…
6:49 PM PDT - Blockstream: [encrypted to hacker's key, PGP-signed by security@blockstream.com]
mempool.space/tx/bd81219691e…
7:20 PM PDT - WHH: "sending most back to bc1qdlld6antmv4xug242ed83q7k4rqw50cwfns38szx4qu2f4jwaxxsuhwxxr, is that ok"
mempool.space/tx/3a3eac4a263…
8:27 PM PDT - WHH: "Please fix the bug first. The chain is under risk at latest commit right now. Make sure every node is patched. Then we will transfer the money back safely after confirming the fix." [+ PGP-encrypted details to Blockstream]
mempool.space/tx/83825b2135d…
8:30 PM PDT - Blockstream: "Yes, thank you." (PGP-signed; answers the 7:20 question, not the 8:27 one — confirmed in the same block)
mempool.space/tx/8a444eed65c…
Status as of 9:12 PM PDT: ~3,998.5 BTC still unmoved, no further messages from either side.
Hacker address: mempool.space/address/bc1ql4…
Neil Galloway ⛏️ retweeted
JUST IN: Hackers have stolen ~4,000 Bitcoin worth $320 million from the Liquid Network 🚨
The hackers claim to be white hat hackers, and said to “contact us on chain” 👀
Neil Galloway ⛏️ retweeted
DEVELOPING: Luke and Mechanic reportedly plan to acquire @Bitcoin X account
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
Neil Galloway ⛏️ retweeted
New #Bitcoin miners are having the same problem right now. Stop trying to "fix" everything when it's not broken and mine your business. It's not a bug, it's a feature! Embrace the suck! 🫡
Replying to @Excellion
I’ve seen a lot of lengthy posts from people writing up what Saylor should do to “fix” this. There’s no need to do anything. Just let the market sort itself out. The design is correct.
The emperor has no clothes! 🤣
Replying to @BeyondtheState_
The candidate list discussed resulted in:
BLAKE2b-256
SHA3x
BLAKE2s
BLAKE3x2
Eaglesong
Remove it from your profile and pretend it never happened. Classic.
BIP110 failed. False prophets fade.
Memories are short. Bitcoin is long. Mine your business.
Neil Galloway ⛏️ retweeted
There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.
Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.
If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update.
Neil Galloway ⛏️ retweeted
Weak random number generation is not a new problem. RNG vulnerabilities have previously been found in:
bip3x Python library
bitaddress.org
BitcoinSpinner
Blockchain.com Android wallet
Blockchain.com web wallet
brainwallet.org browser generator
Cake Wallet
CoinPunk
COLDCARD Mk2 – Mk5 & Q
Ethereum presale wallet generator
Libbitcoin Explorer (bx seed)
Mycelium Bitcoin Wallet
PHPCoinAddress
Profanity
QuickCoin
Schildbach Bitcoin Wallet for Android
Trust Wallet browser extension
Trust Wallet for iOS
Neil Galloway ⛏️ retweeted
Please treat this as urgent. Follow the advisory for your model, upgrade your device, generate a new seed, and carefully move your funds.
Help spread the word, especially to people who are less online and may not see this update.
🚨URGENT COLDCARD SECURITY UPDATE
Read carefully before acting.
👉Mk3 seed generated on 4.0.1+ without ≥50 private, independent dice rolls: begin a careful migration now.
👉Mk4/Mk5 <5.6.0 or Q <1.5.0Q: update first, generate a new seed, then migrate.
blog.coinkite.com/entropy-te…
Neil Galloway ⛏️ retweeted
COLDCARD Mk3 Security Advisory
If you generated a seed on a Mk3 after firmware 4.0.1, your funds may be at risk.
Mk4, Q and Mk5 are not affected based on our early analysis.
Read the advisory and migrate carefully:
blog.coinkite.com/coldcard-m…
Watch your wallets! 👀
I've conducted some preliminary analysis of the ~600 BTC which have moved in a 15 minute period this morning.
What we know:
- 1,324 UTXOs were swept across 500 transactions all within a 3 block window (594.48 BTC).
- From there, 562 BTC was swept again to a new address which has not moved since to: bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r
- The UTXOs that were swept span from 2021 to 2026
100% of the addresses swept were single sig, NONE of the addresses stolen from were taproot.
At a glance, this looks like there was flawed entropy in wallet generation somewhere along the way.























